Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gd31_1GdlwFK5klqWecw-ZwBl3I.cer
File: Gd31_1GdlwFK5klqWecw-ZwBl3I.cer (raw, json)
Hash identifier: DtbafY0hjNnEEHVeW1tHzgZOA+zgsEXxyg0UVyx1v8I=
Subject key identifier: 19:DD:F5:FF:51:9D:97:01:4A:E6:49:6A:59:E7:30:F9:9C:01:97:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA1AB9B937
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/c34ccf-5856-4e4e-a74f-fd24c38cbca4/1/Gd31_1GdlwFK5klqWecw-ZwBl3I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/c34ccf-5856-4e4e-a74f-fd24c38cbca4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:04:48 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 60517
IP: 178.157.96.0/22
IP: 185.27.120.0/22
IP: 185.36.92.0/22
IP: 185.51.128.0/22
IP: 185.91.172.0/22
IP: 185.118.244.0/22
IP: 185.131.180.0/22
IP: 185.175.212.0/22
IP: 2a04:3e40::/29
IP: 2a06:96c0::/29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730592819511 (0xaa1ab9b937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19ddf5ff519d97014ae6496a59e730f99c019772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:a8:78:ea:1e:47:5f:8b:45:27:5e:3a:7f:
b8:68:80:c3:62:16:c0:ef:75:f4:4a:09:b5:56:f5:
8b:cf:98:2a:7b:b2:e8:02:15:90:fa:9e:f0:ee:85:
42:1e:dc:1b:bc:71:02:62:7f:60:be:1f:99:0b:34:
a4:a4:9a:b7:76:1f:ab:0f:40:55:b4:af:85:52:ba:
62:cf:fe:f7:4e:12:c8:68:32:7f:33:79:06:fc:d7:
93:fd:bc:ec:2c:9d:2c:22:b4:45:82:3b:da:06:ac:
d3:d6:97:16:62:21:44:58:08:b1:60:69:3a:cf:e1:
13:1f:6c:01:8c:25:89:49:9e:6c:59:e8:b0:0f:10:
ef:06:c1:22:c3:0d:c8:b4:38:a6:66:4e:eb:d7:a8:
18:cb:7f:bb:0f:9a:59:59:8a:0b:f8:90:09:af:6a:
ea:1b:8c:fd:92:d2:d6:5c:ad:fc:da:9d:f8:fa:f4:
a5:44:08:20:1d:9e:9b:12:04:94:d4:86:c6:5b:13:
b4:e9:bb:6c:9f:e9:9b:f5:69:ee:5a:14:6f:4c:43:
99:18:af:c9:4a:b1:4a:11:3a:ce:23:18:73:5b:b8:
96:e5:f1:3d:95:4c:20:e6:10:7f:88:20:78:29:2f:
83:f3:ab:64:33:23:94:21:0f:2e:e6:f6:6a:7c:f3:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:F5:FF:51:9D:97:01:4A:E6:49:6A:59:E7:30:F9:9C:01:97:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c34ccf-5856-4e4e-a74f-fd24c38cbca4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c34ccf-5856-4e4e-a74f-fd24c38cbca4/1/Gd31_1GdlwFK5klqWecw-ZwBl3I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.96.0/22
185.27.120.0/22
185.36.92.0/22
185.51.128.0/22
185.91.172.0/22
185.118.244.0/22
185.131.180.0/22
185.175.212.0/22
IPv6:
2a04:3e40::/29
2a06:96c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60517
Signature Algorithm: sha256WithRSAEncryption
71:4c:55:f6:16:39:7f:9b:9d:1b:95:fa:e9:9c:85:95:63:26:
81:22:89:e4:6b:5a:71:b2:aa:2d:bf:55:31:e0:28:e6:56:0e:
15:19:7a:a2:09:cc:01:cd:1b:81:88:f7:8e:4c:ca:89:54:da:
98:0c:b0:9a:26:7a:98:aa:74:ca:dc:e0:69:10:4a:12:dc:15:
3e:d6:1f:77:0e:9f:a8:7c:e0:3a:66:1d:9e:1c:4b:82:d6:b7:
3b:31:8c:8c:c4:46:56:18:69:ee:83:20:9f:2d:4f:7b:a9:8b:
f1:99:5c:5e:26:15:da:42:5c:4e:3e:76:68:bb:b9:e4:6d:71:
09:e4:2d:ec:01:13:d4:8d:1b:37:75:0b:92:c2:18:a2:c3:fc:
03:77:85:c4:b1:a5:a5:0f:1f:93:15:a7:28:2b:9c:71:27:05:
43:e7:96:5a:7d:a1:ab:5d:b3:00:e7:cb:20:b1:bf:eb:2f:6e:
e0:00:bb:91:64:e3:a1:43:b7:24:10:0f:19:a2:58:85:ac:a1:
ae:32:63:25:5e:19:c3:e6:a2:32:21:eb:13:b3:bb:c0:b1:39:
fc:ed:94:25:65:76:48:3e:90:29:37:92:5c:b1:a8:37:da:08:
32:76:60:ad:88:8f:b3:7e:3f:c4:55:59:c7:8c:35:9b:a0:7d:
a3:55:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:31:26 2025 by rpki-client